Mercurial > libervia-backend

annotate docker/backend_e2e/certificates/README @ 3387:b3e7e3c49d8f

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
docker (compose): test environment variable + network alias: `SAT_TEST_ENV_E2E` is set to `1` to indicate that e2e environment requirement are available (notably specific accounts and hosts created). The e2e tests needing it won't be launched if this variable is not set. A network alias is set for the backend at `sat.test` (to have a tld available, needed for some network libraries like OpenSSL).
author Goffi <goffi@goffi.org>
date Thu, 12 Nov 2020 14:53:15 +0100
parents 127dde80a0a5
children 829fee174606
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
3381
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
1 Those certificates are used to activate TLS for end-2-end testing (to be as
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
2 close as possible as production environment), they are used in other containers
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
3 needing TLS certificates (notably Prosody).
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
4
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
5 To generate them, minica has been used. Minica can be found at https://github.com/jsha/minica.
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
6
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
7 The following commands have been used:
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
8
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
9 $ minica --domains "server1.test,*.server1.test,server2.test,server3.test,sat.test"
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
10 $ chmod 0644 minica.pem
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
11 $ chmod 0644 server1.test/cert.pem
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
12 $ chmod 0640 server1.test/key.pem
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
13
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
14 Note that certificates are valid for 2 years and 30 days, so they must be renewed after this delay.